Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/LlIa_MwTZA8l54i-FibWo-mcx-0.roa
File: LlIa_MwTZA8l54i-FibWo-mcx-0.roa (raw, json)
Hash identifier: LZyEUDLQjxn500HYU4Bvu7xHJbUnkj62lWCMsgq0KTE=
Subject key identifier: 2E:52:1A:FC:CC:13:64:0F:25:E7:88:BE:16:26:D6:A3:E9:9C:C7:ED
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01835ADAC7FD9639AAC2965730E9BFAA0B35
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/LlIa_MwTZA8l54i-FibWo-mcx-0.roa
Signing time: Tue 20 Sep 2022 12:23:50 +0000
ROA not before: Tue 20 Sep 2022 12:23:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 89.117.72.0/21 maxlen: 24
89.116.123.0/24 maxlen: 24
89.117.88.0/22 maxlen: 24
89.116.250.0/24 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.120.0/22 maxlen: 24
89.116.186.0/24 maxlen: 24
86.38.216.0/22 maxlen: 24
89.116.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:da:c7:fd:96:39:aa:c2:96:57:30:e9:bf:aa:0b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Sep 20 12:23:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e521afccc13640f25e788be1626d6a3e99cc7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:96:68:57:d6:6f:4a:e4:d9:bb:48:72:7a:
07:5b:a7:d6:35:27:2e:6c:11:c7:4b:21:b8:37:14:
46:56:2e:3d:b2:65:1d:05:1a:e9:dd:86:93:55:ef:
97:e8:f6:b4:19:ab:72:69:80:d8:6d:89:33:ef:01:
b2:fc:4e:64:e4:7f:3d:2b:03:bc:27:17:25:62:3f:
5e:17:4f:df:09:1f:04:39:51:1d:9c:6d:90:57:fc:
6b:b3:05:f0:b1:25:fe:a5:21:3d:d9:e7:93:87:02:
ca:0a:7f:06:e6:98:dc:94:f7:03:42:bb:7f:5d:ed:
5a:c3:1c:06:32:47:72:f1:ed:66:6e:39:3f:e6:df:
29:8d:d5:ba:55:ae:e1:7c:a1:8f:94:80:0f:3f:fc:
94:19:e5:1f:82:7d:8c:4b:fc:31:90:4b:c9:25:f4:
d2:51:3a:6e:ab:c5:ff:05:cf:14:3f:f8:05:1d:d3:
4f:6b:71:55:fa:ee:c1:48:4e:a3:c7:26:ea:ab:44:
63:de:f2:cd:63:14:7c:7d:73:a1:42:f8:15:54:c1:
ff:16:53:cb:4b:c3:8b:1e:18:a2:31:3d:f4:7a:3a:
14:88:0d:eb:22:5e:16:8c:d1:4f:03:fc:ab:b8:eb:
81:90:91:da:8b:f2:13:05:47:6a:69:f1:d0:25:40:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:52:1A:FC:CC:13:64:0F:25:E7:88:BE:16:26:D6:A3:E9:9C:C7:ED
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/LlIa_MwTZA8l54i-FibWo-mcx-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.216.0/22
89.116.123.0/24
89.116.186.0/24
89.116.212.0/22
89.116.250.0/24
89.117.72.0/21
89.117.88.0/22
89.117.112.0/22
89.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
89:44:11:eb:94:df:ea:ff:c6:11:3a:e9:33:d4:c2:7e:f1:e3:
3e:d6:95:40:8d:6f:79:1f:ae:35:bb:07:13:f0:2c:c2:cc:dc:
56:61:f6:e2:21:85:06:78:b7:9d:da:c5:e8:60:4d:89:0b:64:
90:0c:32:32:ef:f7:c2:e6:1f:7c:4e:39:8b:e3:25:cf:9d:52:
3d:12:af:51:88:12:60:10:6e:b4:fd:f1:f7:93:1f:3a:4a:45:
c1:53:9e:7a:47:59:37:16:59:b0:f9:37:c7:b1:4d:45:87:35:
ec:2f:cc:37:a6:f8:e2:a3:19:9b:ee:85:d8:3e:42:26:05:85:
d1:79:78:ac:67:70:34:2e:6c:59:c0:25:f6:62:41:cc:85:5f:
87:14:fd:b7:e5:df:6f:1a:bc:01:b5:eb:46:f8:2f:70:e0:ad:
5a:32:86:8b:9b:37:e5:e4:37:a1:e6:d7:65:c0:92:d0:4f:00:
10:d0:ce:a0:58:70:88:4b:e0:7b:f7:50:2b:24:82:a2:b6:e0:
f4:59:49:54:91:8f:59:8c:b0:33:5c:d7:c9:bc:7b:e1:2f:97:
ab:9f:c9:12:7d:ac:53:10:06:45:84:60:f9:ae:a7:1f:8b:b9:
9c:c2:85:fc:b8:20:bf:82:a6:6b:12:31:7e:de:da:e1:ee:14:
86:3b:4a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org